Feb 6, 2023 | CVE, Vulnerability
CVE pending – pending – Vulnerable software PasswordSafe 8.12.1.22757 (according to the manufacturer, the current version 8.13.9.26689 was also affected at that time) Vulnerability Weak cryptography Timeline 26.01.2022: Contact with Mateso by e-mail...
Mar 9, 2022 | CVE, Vulnerability
CVE – pending – Vulnerable software PlugFree Network Version <= 7.3.0.3 Vulnerability An unquoted service path allows a possible extension of rights at the system level. Timeline 28.10.2021 Manufacturer informed 22.11.2021 Manufacturer contacted again...
Mar 8, 2022 | CVE, Vulnerability
CVE – pending – Vulnerable software DSM Remote Version <= 6.3.1.1862 Vulnerability An unquoted service path allows a possible extension of rights at the system level. Timeline 29.10.2021 Manufacturer informed 10/30/2021 Manufacturer states that the...
Feb 9, 2022 | CVE, Vulnerability
CVE -pending- Vulnerable Software Remote Desktop Commander Suite Agent <= Version 4.8 Vulnerability Unquoted Service Path Vulnerability Time Line 12.11.2021 Vendor informed 10.12.2021 Vendor confirmed the issue and kindly ask for a release on 9th of February...
Jan 3, 2022 | CVE, exploit, Vulnerability
While doing my preperation for the OSCE i found an exploit for the coolpalyer+ version 2.19.1 from 2009. I decided to check this vulnerability in the recent software version (2.19.6) on my Windows 10 machine. The following post descripes the exploit development. 1....
Jan 3, 2022 | CVE, Vulnerability
Vulnerable Software FTP server 8.0f(g) Vulnerability Local Buffer Overflow (SEH protected)-> Code Execution time line 01/24/2018 Vendor informed 30.01.2018 Vendor reminded 12.02.2018 Software patched 20.02.2018 Vulnerability Disclose Description The free...